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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
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Status 

1 )K Responsive to communication(s) filed on 23 February 2004 . 
2a)D This action is FINAL. 2b)S This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 
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4) ^ Claim(s) 1-26 is/are pending in the application. 
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5) D Claim(s) is/are allowed. 

6) S C\a\m(s) 1^26 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 
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DETAILED ACTION 

CLAIMS PRESENTED 

Claims 1-26 are presented. 

CLAIM REJECTIONS 

Claim Rejections - 35 USC § 102 

Claims 1-7, 10-11, 13-17 are rejected under 35 U.S.C. 102(b) as being 
anticipated by Frantzen (Frantzen, Shuey, StackGhost: Hardware Facilitated Stack 
Protection, Proceedings of the 10 th USENIX Security Sympsium, August, 2001). 
Frantzen teaches: 
Clam 1 : A processor comprising: 
a plurality of functional units (Section 2.1 Conventional function calls, i.e. 
function calls), including a first functional unit and a second 

functional unit, the first functional unit to receive instructions, to 
determine whether ones of the instructions are associated with a 
virus, and to transmit the ones of the instructions not associated with 
the virus to the second functional unit (section 1 Introduction, i.e., solution 
to attacks - the first paragraph, Sparc return address handlings - the second 
paragraph). 
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Claims 2-6: various virus detection and handling (section 1 Introduction, i.e., 
solution to attacks - the first paragraph, Sparc return address handlings - the second 
paragraph). 

Claim 7: apparatus, etc, (section 1 Introduction, i.e., solution to attacks - the first 
paragraph, Sparc return address handlings -the second paragraph). 

Claims 10-11, 13-17: various virus detection and handling (section 1 Introduction, 
i.e., solution to attacks - the first paragraph, Sparc return address handlings - the 
second paragraph). 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed 
or described as set forth in section 102 of this title, if the differences between the 
subject matter sought to be patented and the prior art are such that the subject 
matter as a whole would have been obvious at the time the invention was made 
to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was 
made. 

Claims 8-9, 12, 18-26 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Frantzen (Frantzen, Shuey, StackGhost: Hardware Facilitated Stack Protection, 
Proceedings of the 10 th USENIX Security Sympsium, August, 2001). 

Claims 8-9, 12, 18-26 recite "virus signatures." 

Regarding Claims 8, Frantzen teaches as noted in the previous paragraphs. 



Application/Control Number: 10/612,763 Page 4 

Art Unit: 2134 

These passages of Frantzen do not teach "virus signatures" handling in 
processor hardware in the sense of the claim. 

Frantzen does teach use of the return address stack (section 3.4). This permits 
the use of hash table as noted in Frantzen (section 3.4). Frantzen does suggest Non- 
Exec pages (section 7.5). These approaches, such as Sun's non-executable stack 
(mentioned in section 7.5, albeit only a mention and not explicit discussion) are, of 
course, now standard features in almost all 64-bit processors. These features, such as 
return address stack handlings, permit handling of virus signatures (see the fourth 
paragraph of section 3.4 which shows comparing the random number on the stack so 
as to find an exploit - a virus signature). 

Thus, it was well known in the art to use stack handlings (e.g., non-executable 
stack) for the motivation of virus protection. 

Hence, it would have been obvious to those of ordinary skill in the art at the time 
of the claimed invention to modify Frantzen for the motivation noted in the previous 
paragraphs so as to teach the claimed invention. 

Other than "virus signatures", Frantzen teaches other features of claims 9 
(authentication), 12 (comparing instructions, etc.): (see the fourth paragraph of section 
3.4 which shows comparing the random number on the stack so as to find an exploit - a 

■ 

virus signature). 

Other features of claims 18-20 (instruction cache, etc.) are well known in the art 
for the motivation of performance enhancement. 



Application/Control Number: 10/612,763 Page 5 

Art Unit: 2134 

Other features of claims 21-26 (memory hardware, etc.) are well known in the art 
for the motivation of information storage. 

Conclusion 

The art made of record and not relied upon is considered pertinent to applicant's 
disclosure. The art disclosed general background. 

Points of Contact 

Any response to this action should be mailed to: 

Commissioner of Patents and Trademarks 
Washington, D.C. 20231 

or faxed to: 

♦ 

(571 ) 273-8300, (for formal communications intended for entry) 
Or: 

(571) 273-3836 (for informal or draft communications, please label "PROPOSED" or 
"DRAFT") 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to David Jung whose telephone number is (571) 272-3836 
or Jacques Louis-Jacques whose telephone number is (571 ) 272-6962. 



David Jung 




Patent Examiner 
9/28/06 



